Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File:                     C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier:          QvZtgpqGlYswUvuW+rudvUkIWSdDyiqPjConKz4HGWo=
Subject key identifier:   F3:9E:70:13:E0:24:76:B2:7B:A3:1E:BF:33:76:3B:02:3F:88:09:32
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer:       /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number:          018B
Signing time:             Fri 17 Apr 2026 04:12:55 +0000
Manifest this update:     Fri 17 Apr 2026 04:12:54 +0000
Manifest next update:     Fri 24 Apr 2026 04:12:54 +0000
Files and hashes:         1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: uBwN33uWU/vBHA2DEXt9LaZ598t28nIKHAdOfBgwrBw=)
                          2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: ggAQnyXdNs7ZbN7s75DCVXJXQOiPT7nZ4fbBC6nuxr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
        Validity
            Not Before: Apr 17 04:12:54 2026 GMT
            Not After : Apr 24 04:12:54 2026 GMT
        Subject: CN=69e1b347-d285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:ac:b7:2c:cb:a7:2d:a2:38:70:88:0b:63:
                    06:25:64:f7:ce:5c:55:87:a5:a0:26:6b:da:5a:b6:
                    f2:16:f1:71:86:ed:e1:97:85:23:f5:df:be:91:7d:
                    2c:3b:0a:23:9a:54:da:db:73:e0:1c:1c:7d:1b:27:
                    c1:83:bf:4b:8d:3c:3c:f7:53:cc:37:20:48:2d:a0:
                    75:47:9c:3b:dd:be:f9:fa:eb:42:82:fe:a6:1f:f1:
                    b4:5e:fc:d3:cb:bc:38:76:f9:3c:28:91:b3:3c:5e:
                    cc:7c:06:11:a2:92:4a:29:12:2a:fc:ba:2e:eb:24:
                    63:30:ab:83:7c:6e:98:e4:a1:07:41:24:62:ec:a9:
                    42:fd:59:34:00:b1:2e:8c:b9:1b:fb:77:6a:44:aa:
                    a3:2a:f6:22:de:0a:cb:7f:65:fc:6f:3a:c4:04:39:
                    72:d0:f6:1d:c8:1b:ad:09:81:5b:f4:67:5c:8a:cf:
                    6b:af:39:10:3d:c2:b2:b8:0f:68:d2:6b:1f:db:f9:
                    48:44:71:df:29:e7:65:9c:7b:00:f8:06:85:52:4a:
                    0c:93:7e:6a:cf:36:e9:7c:b8:2e:c1:b9:b3:50:f3:
                    44:10:30:fb:b2:63:15:22:fa:94:a8:7c:22:80:53:
                    35:6d:72:ed:ec:60:36:55:6a:a5:8e:17:7b:2e:7e:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9E:70:13:E0:24:76:B2:7B:A3:1E:BF:33:76:3B:02:3F:88:09:32
            X509v3 Authority Key Identifier:
                keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:eb:9c:b7:96:d8:27:0c:25:b1:56:e0:40:ba:46:04:ea:
         00:d7:a5:6f:f0:79:32:01:66:4d:48:64:81:f1:d9:9f:af:16:
         44:60:6d:8f:96:b4:c9:0f:d0:21:b2:0e:51:76:e6:91:15:48:
         47:46:56:b0:bd:d4:5f:e6:2e:44:8c:3f:86:7f:99:d2:b6:01:
         a5:53:a0:19:fd:a1:3e:79:75:8e:6e:f5:14:e7:20:f3:c1:8f:
         21:2e:92:fb:f0:ba:3a:ca:78:f2:b3:7a:a6:7d:8f:d2:90:7f:
         c7:01:c4:75:e7:30:b4:be:05:98:21:58:31:33:81:da:a1:f2:
         7b:55:2d:33:a0:d8:39:38:ae:71:2d:d0:95:2f:a1:89:6f:49:
         a8:c1:c8:89:c9:57:28:d4:b7:62:8d:8d:6c:e6:73:29:60:21:
         0a:3e:13:13:0d:ab:65:21:2d:45:88:1c:ca:36:07:bc:71:2c:
         0e:af:76:0f:84:da:61:4d:4a:b8:92:64:84:81:f9:11:a6:a9:
         13:80:cc:92:da:0a:62:00:74:51:d4:23:0c:22:76:1e:d4:63:
         f6:53:a3:e0:6f:f7:30:98:3a:f7:29:fc:8f:54:b0:6c:21:ec:
         41:d9:52:f1:e1:6c:2e:35:6c:77:bd:2c:55:94:ba:5e:7b:35:
         a0:42:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:34 2026 by rpki-client